landjail Jail Type
Documentation for LandJail
On this page
landjail is Agent Firewall's alternative jail type that uses Landlock V4 for network isolation.
Overview
Agent Firewall uses Landlock V4 to enforce network restrictions:
- All
bindsyscalls are forbidden - All
connectsyscalls are forbidden except to the port that is used by http proxy
This provides network isolation without requiring network namespace capabilities or special Docker permissions.